50f6ed33ecbfe835cd69ad989fca695b815b187d967366ed9db8533d834e9e82 | Triage

Sharing

General

Target

50f6ed33ecbfe835cd69ad989fca695b815b187d967366ed9db8533d834e9e82
Size

4.0MB
MD5

cd5c221c4973b7f1c136184689618f7f
SHA1

722e60ffc5bacccd3fc8232e2d5620a57aba541a
SHA256

50f6ed33ecbfe835cd69ad989fca695b815b187d967366ed9db8533d834e9e82
SHA512

973a14e40c9e4c82bedde1900edf2f420a6cc90f5531f1f2f538fa44350fe6b33bda87b0835945cb790f2f46966d9b4fe2db84ecb2574e418352c2d6d44aa73e
SSDEEP

98304:r/1N2AZDM1ocWSOM4eT1MYqtV0QIBB5EQyONrSyK945uN5ubidqqQQr/D:rdEQDMUZiTGY4bIBB5XyONrVRuNSid9r

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

50f6ed33ecbfe835cd69ad989fca695b815b187d967366ed9db8533d834e9e82
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE